Systems and methods for post-quantum cryptography optimization

Abstract

Systems, apparatuses, methods, and computer program products are disclosed for post-quantum cryptography (PQC). An example method includes receiving data. The example method further includes generating a set of data attributes about the data. The example method further includes generating a data envelope based on the set of data attributes. Subsequently, the example method includes generating an enveloped data structure based on the data envelope and the data.

What is claimed is: 
     
       1. A system for post-quantum cryptography (PQC), the system comprising:
 communications circuitry configured to:
 receive data; 
 
 data structure generation circuitry configured to:
 generate an enveloped data structure based on the data; 
 
 data storage circuitry configured to:
 store the enveloped data structure in a database management system; 
 
 data access monitoring circuitry configured to:
 monitor the enveloped data structure for a change in the enveloped data structure; and 
 
 data attribute generation circuitry configured to:
 in response to detection of a change in the enveloped data structure, perform at least one action from a list of actions, the list of actions comprising generating a modified set of data attributes about the data, generating a modified data envelope, generating a modified enveloped data structure, determining a PQC cryptographic technique, or encrypting the data based on a PQC cryptographic technique. 
 
 
     
     
       2. The system of  claim 1 , wherein the data comprises data access control information. 
     
     
       3. The system of  claim 1 , wherein the data comprises a link to the data. 
     
     
       4. The system of  claim 3 , wherein the link to the data comprises a link to a credit card number. 
     
     
       5. The system of  claim 1 , wherein the data attribute generation circuitry is further configured to generate a data lineage data attribute indicative of a data lineage of the data, wherein the modified set of data attributes comprises the data lineage data attribute. 
     
     
       6. The system of  claim 1 , wherein the data comprises a bitstream, and wherein the data attribute generation circuitry is further configured to generate, based on an automated analysis of the bitstream and without user interactivity, a cryptographic data attribute indicative of a cryptographic technique used to encrypt the data, wherein the enveloped data structure is generated based on the cryptographic data attribute. 
     
     
       7. The system of  claim 1 , wherein the data attribute generation circuitry is further configured to generate a cryptographic spawn log indicative of a set of cryptographic techniques used to encrypt the data over a duration of time, wherein the enveloped data structure is generated based on the cryptographic spawn log. 
     
     
       8. The system of  claim 1 , wherein the data attribute generation circuitry is further configured to generate a data zone data attribute indicative of a data zone associated with the data, wherein the enveloped data structure is generated based on the data zone data attribute. 
     
     
       9. The system of  claim 1 , wherein the enveloped data structure comprises the data. 
     
     
       10. The system of  claim 1 , wherein the enveloped data structure comprises a binary large object (BLOB). 
     
     
       11. The system of  claim 1 , wherein the enveloped data structure comprises an original set of data attributes and an original data envelope, wherein the enveloped data structure is an original enveloped data structure, wherein the system further comprises data envelope generation circuitry, and wherein:
 the communications circuitry is configured to:
 receive the data at a first time; 
 
 wherein the data access monitoring circuitry is further configured to:
 determine that the data has been accessed at a second time later than the first time; 
 
 the data attribute generation circuitry is configured to:
 in response to a determination that the data has been accessed at the second time, generate the modified set of data attributes about the data; 
 
 the data envelope generation circuitry is configured to:
 generate the modified data envelope based on the modified set of data attributes; and 
 
 the data structure generation circuitry is configured to:
 generate the modified enveloped data structure based on the modified data envelope and the data. 
 
 
     
     
       12. The system of  claim 11 , wherein the original set of data attributes comprises an original data lineage data attribute indicative of an original data lineage of the data, wherein the modified set of data attributes comprises a modified data lineage data attribute indicative of a modified data lineage of the data, and wherein the original data lineage data attribute is different from the modified data lineage data attribute. 
     
     
       13. The system of  claim 1 , wherein the enveloped data structure comprises an original set of data attributes comprising a first data zone data attribute indicative of a first data zone associated with the data, wherein the enveloped data structure further comprises an original data envelope, wherein the enveloped data structure is an original enveloped data structure, wherein the system further comprises data zone monitoring circuitry and data envelope generation circuitry, and wherein:
 the communications circuitry is configured to:
 receive the data at a first time; 
 
 the data zone monitoring circuitry is configured to:
 determine that the data has transitioned from the first data zone to a second data zone at a second time later than the first time; 
 
 the data attribute generation circuitry is configured to:
 in response to a determination that the data has transitioned from the first data zone to the second data zone at the second time, generate the modified set of data attributes about the data, wherein the modified set of data attributes comprises a second data zone data attribute indicative of the second data zone associated with the data, and wherein the second data zone data attribute is different from the first data zone data attribute; 
 
 the data envelope generation circuitry is configured to:
 generate the modified data envelope based on the modified set of data attributes; and 
 
 the data structure generation circuitry is configured to:
 generate the modified enveloped data structure based on the second data envelope and the data. 
 
 
     
     
       14. The system of  claim 1 , wherein the data has been encrypted using a non-PQC cryptographic technique, and wherein the system further comprises:
 PQC cryptographic attribute generation circuitry configured to:
 determine a PQC cryptographic technique based on the enveloped data structure and PQC performance information associated with a set of PQC cryptographic techniques; and 
 
 PQC cryptographic circuitry configured to:
 encrypt the data using the PQC cryptographic technique. 
 
 
     
     
       15. The system of  claim 1 , wherein the data attribute generation circuitry is further configured to generate the modified set of data attributes about the data based on a machine learning technique, wherein the enveloped data structure is generated based on the modified set of data attributes. 
     
     
       16. The system of  claim 1 , further comprising user interface circuitry configured to generate a data attribute graphical user interface (GUI) based on the enveloped data structure, wherein the communications circuitry is configured to transmit the data attribute GUI to a client device. 
     
     
       17. A method for post-quantum cryptography (PQC), the method comprising:
 receiving, by communications circuitry, data; 
 generating, by data structure generation circuitry, an enveloped data structure based on the data; 
 storing, by data storage circuitry, the enveloped data structure in a database management system; 
 monitoring, by data access monitoring circuitry, the enveloped data structure for a change in the enveloped data structure; and 
 in response to detection of the change in the enveloped data structure, performing at least one action, by data attribute generation circuitry, from a list of actions, the list of actions comprising generating a modified set of data attributes about the data, generating a modified data envelope, generating a modified enveloped data structure, determining a PQC cryptographic technique, or encrypting the data based on a PQC cryptographic technique. 
 
     
     
       18. The method of  claim 17 , wherein the data comprises data access control information. 
     
     
       19. The method of  claim 17 , wherein the data comprises a link to the data. 
     
     
       20. A computer program product for post-quantum cryptography (PQC), the computer program product comprising at least one non-transitory computer-readable storage medium storing program instructions that, when executed, cause a system to:
 receive data; 
 generate an enveloped data structure based on the data; 
 store the enveloped data structure in a database management system; 
 monitor the enveloped data structure for a change in the enveloped data structure; and 
 in response to detection of the change in the enveloped data structure, perform at least one action from a list of actions, the list of actions comprising generating a modified set of data attributes about the data, generating a modified data envelope, generating a modified enveloped data structure, determining a PQC cryptographic technique, or encrypting the data based on a PQC cryptographic technique.